AcceleratedHTTPCacheManager: do nothing if object is not directly published.

If we accidentally specify AcceleratedHTTPCacheManager in a widely-called Script (Python) by mistake, many responses will have wrong Cache-Control header.
With this change, AcceleratedHTTPCacheManager is effective only when the object itself is directly published, so that we can prevent such unexpected cache pollution.

product/ERP5Type/patches/AcceleratedHTTPCacheManager.py

@@ -12,6 +12,10 @@ def ZCache_set(self, ob, data, view_name, keywords, mtime_func):
     # data.  mtime_func is also ignored because using "now" for
     # Last-Modified is as good as using any time in the past.
     REQUEST = ob.REQUEST
+    # Do nothing if ob is not directly published.
+    published = REQUEST.get('PUBLISHED')
+    if getattr(published, '__self__', published) != ob:
+        return
     RESPONSE = REQUEST.RESPONSE
     anon = 1
     u = REQUEST.get('AUTHENTICATED_USER', None)